CCNA Mock Exam 86 — 25 Questions

Question 1

Match each switching feature to its most accurate purpose.

Accepted Answer

STP prevents loops, VTP manages VLANs, EtherChannel aggregates links, Port Security restricts MAC addresses, DTP negotiates trunks, and Rapid PVST+ provides fast per-VLAN convergence.. PortFast allows an edge port (connected to an end device) to bypass the listening and learning states and transition directly to forwarding, speeding up convergence. BPDU Guard disables a port if it receives a BPDU, protecting against accidental bridge connections on edge ports. Port security restricts which MAC addresses can communicate on a switch port, preventing unauthorized devices. DHCP Snooping filters DHCP messages and builds a binding table of trusted clients, helping to block rogue DHCP servers and attacks.

Answer

STP manages VLANs, VTP prevents loops, EtherChannel restricts MAC addresses, Port Security aggregates links, DTP provides fast per-VLAN convergence, and Rapid PVST+ negotiates trunks.

Answer

STP aggregates links, VTP prevents loops, EtherChannel manages VLANs, Port Security negotiates trunks, DTP restricts MAC addresses, and Rapid PVST+ provides fast per-VLAN convergence.

Answer

STP provides fast per-VLAN convergence, VTP aggregates links, EtherChannel prevents loops, Port Security manages VLANs, DTP restricts MAC addresses, and Rapid PVST+ negotiates trunks.

Question 2

Drag and drop the following steps into the correct order to sequence the TCP three-way handshake between a client and a server.

Accepted Answer

Client sends SYN. The TCP three-way handshake starts with the client sending a SYN, followed by the server responding with SYN-ACK, and finally the client sending an ACK to establish the connection.

Answer

Server sends ACK

Question 3

Match each controller or API direction term to its most accurate meaning.

Accepted Answer

Northbound API: Interface between the SDN controller and applications, typically using RESTful APIs.. Controller/API directions: Northbound goes to apps; Southbound to devices; East/West between controllers; REST and NETCONF are common protocols.

Answer

Southbound API: Interface between the SDN controller and network devices, using protocols like OpenFlow or NETCONF.

Answer

East-West API: Interface between controllers in a distributed SDN environment, often using proprietary protocols.

Answer

REST API: A protocol used for communication between controller and applications, typically over HTTP.

Question 4

Match each data format or API term to its best description.

Accepted Answer

JSON. JSON, XML, and YAML are data formats; REST is an architectural style that commonly uses HTTP methods, while SOAP and gRPC are API protocols. Each has distinct characteristics: JSON is lightweight, XML is verbose, YAML is human-readable, REST uses HTTP verbs, SOAP is strict, and gRPC is high-performance.

Answer

XML

Answer

REST

Answer

SOAP

Question 5

Match each structured-data term to its most accurate meaning.

Accepted Answer

JSON: A lightweight data-interchange format that is easy for humans to read and write and easy for machines to parse and generate.. The terms are matched with their accurate descriptions in the context of structured data formats.

Answer

XML: A markup language that defines a set of rules for encoding documents in a format that is both human-readable and machine-readable.

Answer

YAML: A human-readable data serialization language that is often used for configuration files and in applications where data is being stored or transmitted.

Answer

CSV: A simple file format used to store tabular data, such as a spreadsheet or database, where each line represents a data record and each record consists of one or more fields separated by commas.

Question 6

Drag and drop the cable types, transceivers, and diagnostic commands on the left to the correct descriptions or specifications on the right.

Accepted Answer

Straight-through cable: Connects PC to switch. Cat6a copper cable supports 10GBASE-T at 100 meters due to its enhanced specification. Single-mode fiber uses a narrow 9-micron core, allowing light to travel in a single mode for long distances up to 40 km. Multimode fiber has a larger core (50 or 62.5 microns), which introduces modal dispersion and limits distances to about 550 meters for Ethernet. SFP transceivers are hot-swappable modules that provide the interface between a switch port and fiber or copper cabling. The 'show interfaces' command displays detailed interface statistics, including CRC errors and status, while 'show interfaces transceiver' displays optical monitoring data such as transmit power, receive power, and temperature.

Answer

Crossover cable: Connects switch to switch

Answer

Rollover cable: Used for console access

Answer

SFP: A type of transceiver

Question 7

Drag and drop the following steps into the correct order to describe the ARP resolution process when a host needs to send data to another host on the same Ethernet network.

Accepted Answer

Check ARP cache for the destination IP address. ARP resolution begins with checking the cache, then broadcasting a request if needed, the target replies with its MAC, and the source updates its cache to send data directly.

Question 8

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, and in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Access privileged EXEC mode, create a capture buffer, associate a capture point, start the capture, stop and export the capture, analyze in Wireshark. For IOS‑XE embedded packet capture, the correct order is: 1) Access privileged EXEC mode (required for all monitor commands), 2) Create a capture buffer, 3) Associate a capture point, 4) Start the capture, 5) Stop the capture, 6) Export the capture, 7) Analyze in Wireshark. Options B, C, and D each violate the required sequence: B starts buffer creation before entering privileged mode, C associates the point before creating the buffer, and D omits the critical 'start' step entirely.

Answer

Create a capture buffer, access privileged EXEC mode, associate a capture point, start the capture, stop and export the capture, analyze in Wireshark

Answer

Access privileged EXEC mode, associate a capture point, create a capture buffer, start the capture, stop and export the capture, analyze in Wireshark

Answer

Access privileged EXEC mode, create a capture buffer, associate a capture point, stop and export the capture, analyze in Wireshark

Question 9

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, and in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Enter privileged EXEC mode, enable capture on the interface, define buffer and filter, start capture, then export for Wireshark analysis.. After entering privileged EXEC mode, enable capture on the interface, define buffer/filter, start capture, then export for Wireshark analysis; starting before configuring buffer would fail.

Question 10

Drag and drop the following troubleshooting steps into the correct order to diagnose a client connectivity issue using the OSI bottom-up method.

Accepted Answer

Check physical connectivity, then data link, then network, then transport, then application. The OSI bottom-up method starts at physical layer and moves up. This ensures that lower-layer issues are resolved before higher-layer troubleshooting, preventing wasted effort on symptoms caused by underlying problems.

Answer

Check application, then transport, then network, then data link, then physical

Answer

Check network, then data link, then physical, then transport, then application

Answer

Check physical, then network, then data link, then transport, then application

Question 11

Drag and drop the following steps into the correct order to plan, configure, and apply an extended ACL that permits only HTTP traffic from the 192.168.1.0/24 network to the server at 10.0.0.100, and then verify the configuration.

Accepted Answer

Enter global configuration mode, create the ACL with a permit statement for HTTP from 192.168.1.0/24 to 10.0.0.100, apply it inbound on the interface facing the 192.168.1.0/24 network, save the configuration, and verify with show access-lists.. First, enter config mode. Then create the ACL allowing HTTP from the source network to the destination host. Apply it inbound on the appropriate interface. Save and verify the configuration.

Answer

Enter global configuration mode, create the ACL with a permit statement for HTTP from 192.168.1.0/24 to 10.0.0.100, apply it outbound on the interface facing the server, save the configuration, and verify with show ip interface.

Answer

Enter interface configuration mode, create the ACL with a permit statement for HTTP from 192.168.1.0/24 to 10.0.0.100, apply it inbound on the same interface, save the configuration, and verify with show running-config.

Answer

Enter global configuration mode, create the ACL with a deny statement for HTTP from 192.168.1.0/24 to 10.0.0.100, apply it inbound on the interface facing the server, save the configuration, and verify with show access-lists.

Question 12

Drag and drop the following steps into the correct order to configure an IPv4 static address on a Windows host, generate an IPv6 EUI-64 address on a Cisco router, and verify the static IP assignment on Windows.

Accepted Answer

Configure static IPv4 address on Windows → Generate IPv6 EUI-64 address on router → Verify static IP on Windows. The static IPv4 is configured on Windows first, then the EUI-64 IPv6 address on the router, and finally verification on Windows. This order separates host and router tasks logically.

Answer

Generate IPv6 EUI-64 address on router → Configure static IPv4 address on Windows → Verify static IP on Windows

Answer

Configure static IPv4 address on Windows → Verify static IP on Windows → Generate IPv6 EUI-64 address on router

Answer

Generate IPv6 EUI-64 address on router → Verify static IP on Windows → Configure static IPv4 address on Windows

Question 13

Drag and drop the following steps into the correct order to configure VLANs, assign access ports, set up 802.1Q trunking with a native VLAN, and verify the configuration on a Cisco IOS-XE switch.

Accepted Answer

Create VLANs in global configuration mode. VLAN creation precedes port assignment; trunking configuration follows access port assignment; verification is last.

Answer

Assign access ports to VLANs

Answer

Configure 802.1Q trunking with native VLAN

Answer

Verify configuration using show commands

Question 14

Drag and drop the following steps into the correct order to configure and apply an extended ACL that permits only HTTP traffic from the 192.168.1.0/24 network to the server at 10.0.0.1, with the ACL applied inbound on the router's GigabitEthernet0/0 interface, and then verify the configuration.

Accepted Answer

Enter global configuration mode, create the ACL with 'access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 10.0.0.1 eq www', apply it inbound on GigabitEthernet0/0 with 'ip access-group 100 in', then exit and verify with 'show access-lists'.. First, enter config mode. Create the ACL permitting HTTP from the source network to the destination host. Apply it inbound on the correct interface. Then exit and verify.

Answer

Enter global configuration mode, create the ACL with 'access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 10.0.0.1 eq www', apply it outbound on GigabitEthernet0/0 with 'ip access-group 100 out', then exit and verify with 'show access-lists'.

Answer

Enter global configuration mode, create the ACL with 'access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 10.0.0.1 eq www', apply it inbound on GigabitEthernet0/0 with 'ip access-group 100 in', then verify with 'show running-config' without exiting configuration mode.

Answer

Enter global configuration mode, create the ACL with 'access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 10.0.0.1 eq www', apply it inbound on GigabitEthernet0/0 with 'ip access-group 100 in', then exit and verify with 'show ip interface brief'.

Question 15

Drag and drop the following steps into the correct order to retrieve a specific interface configuration via RESTCONF and apply a change to the interface description.

Accepted Answer

Send a GET request to retrieve the current interface configuration.. Retrieve the current interface config, parse it, modify the description, apply the update, and verify the change.

Question 16

Drag and drop the following steps into the correct order to configure Root Guard on designated ports, Loop Guard on non-designated ports, and BPDU Guard on PortFast ports, including recovery steps when a port enters err-disabled.

Accepted Answer

1. Configure Root Guard on designated ports. 2. Configure Loop Guard on non-designated ports. 3. Configure BPDU Guard on PortFast ports. 4. Configure errdisable recovery for the cause (e.g., bpduguard).. Root Guard must be applied first on designated ports to prevent unwanted root bridge changes, then Loop Guard on non-designated ports to prevent loops, followed by BPDU Guard on PortFast ports. Recovery steps are last because they apply after a violation occurs.

Question 17

Drag and drop the following steps into the correct order to configure IPv4 and IPv6 static routes, a default route, and a floating static route with higher administrative distance, then verify the routing tables.

Accepted Answer

Configure specific IPv4 and IPv6 static routes, then configure the default route and floating static route with higher AD, then verify routing tables.. The order first configures specific static routes, then the default route and floating static route (which can be done in any order but typically after specific routes), and finally verification. The floating static route is configured with a higher AD so it is less preferred.

Question 18

Drag and drop the following steps into the correct order to create VLANs, assign access ports, configure 802.1Q trunks, set the native VLAN, and verify with 'show vlan brief' and 'show interfaces trunk'.

Accepted Answer

Create VLANs, assign access ports, configure 802.1Q trunks, set native VLAN, verify with 'show vlan brief' and 'show interfaces trunk'. VLANs must be created before assigning ports; trunking is configured after access ports; verification is the final step.

Answer

Assign access ports, create VLANs, configure 802.1Q trunks, set native VLAN, verify with 'show vlan brief' and 'show interfaces trunk'

Answer

Create VLANs, assign access ports, set native VLAN, configure 802.1Q trunks, verify with 'show vlan brief' and 'show interfaces trunk'

Answer

Assign access ports, configure 802.1Q trunks, create VLANs, set native VLAN, verify with 'show vlan brief' and 'show interfaces trunk'

Question 19

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, and in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Define the capture interface, apply a filter, start capture, stop capture, export for analysis in Wireshark.. First define the capture interface, then apply a filter, start capture, stop it, and finally export for analysis in Wireshark.

Answer

Apply a filter, define the capture interface, start capture, export for analysis, stop capture.

Answer

Define the capture interface, start capture, apply a filter, stop capture, export for analysis.

Answer

Apply a filter, start capture, define the capture interface, stop capture, export for analysis.

Question 20

Drag and drop the configuration steps into the correct order to configure an LACP EtherChannel on two Cisco switches using active mode negotiation.

Accepted Answer

Configure the interface range. The correct order begins with configuring the interface range because the channel-group command must be issued under interface configuration mode. Then, set the channel-group mode to active to enable LACP active negotiation on both switches. Finally, verify the EtherChannel status using 'show etherchannel summary' to confirm the channel is up and using LACP. Option C uses passive mode, which would not initiate negotiation as required; option D uses 'show interfaces status', which does not display EtherChannel-specific information.